CVE-2020-6066: High severity Accusoft ImageGear vulnerability

Published Feb 11, 2020

Updated

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.5.0

Event History

Feb 11, 2020

CVE Published

via MITRE·08:54 PM

Data Sourced

via MITRE·08:54 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-6066?

CVE-2020-6066 is an exploitable out-of-bounds write vulnerability in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library.

What is the severity of CVE-2020-6066?

The severity of CVE-2020-6066 is critical, with a CVSS score of 8.8.

How does CVE-2020-6066 work?

CVE-2020-6066 can be exploited by providing a specially crafted JPEG file that triggers an out-of-bounds write, leading to remote code execution.

Which version of Accusoft ImageGear is affected by CVE-2020-6066?

Accusoft ImageGear version 19.5.0 is affected by CVE-2020-6066.

Is there a fix for CVE-2020-6066?

Yes, updating to a version of Accusoft ImageGear that is not affected by the vulnerability will fix CVE-2020-6066.